News without the noise
Technology news: AI, chips and devices, programming, security, crypto and the companies building them.
2284 articles · page 1 of 48 · The Tech front page
A malicious version of Anthropic's Claude Code extension distributed through Cursor's extension marketplace for roughly 11 hours on October 29 exposed up to 5,000 developers to malware designed to install persistent SSH backdoors.
Two large security stories landed the same day: a multi-billion-dollar breach at the world's biggest crypto exchange, which it says it will cover in full, and a critical flaw in the PHP language that pushed governments and a major port to take sites offline. Both show how quickly an exploited weakness can spread across systems many people rely on.
· 18 sources
DoorDash has received only “several hundred” orders from third-party AI agents such as Muse, Instinct and Fo, the delivery company disclosed on its third-quarter earnings call, a figure that contrasts with the uproar about AI agents taking over commerce.
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers are actively exploiting a maximum-severity vulnerability in GitLab, tracked as CVE-2026-97229. The flaw, which was patched earlier this month, could allow unauthenticated remote attackers to run arbitrary code via a maliciously crafted regular expression in CI/CD configuration files. CISA has added the vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog and ordered federal agencies to secure their servers by Sunday.
Cisco has tasked a 27-year-old engineer with rewriting 98% of the company's legacy code within 24 months using AI, while president and chief product officer Jeetu Patel says he hopes to find more young hires in the Krishnamurthy mould, both inside the company and externally.
Tom's Hardware published benchmarks of Nvidia's Vera data center CPU, finding it matched or beat comparable AMD EPYC and Intel Xeon processors in some tests relevant to agentic workflows, though the reviewers note server performance depends on use cases and software optimisation.
Netflix has added single-tenant Titus, a mode that runs one task alone on its own right-sized EC2 instance, aimed at stateful, high-throughput streaming workloads where a neighbor's interference can lead to minutes of checkpoint recovery. The Compute/Platform team still owns and patches the host, so application teams keep the same API and deployment path.
Trezor has warned customers who bought its hardware wallets from reseller CryptoBilis to move their funds as soon as possible, after a buyer in Indonesia reported a hardware implant in a Trezor Safe 5 device. The company said it had not yet examined the device but treated the report as credible based on a description and video interview.
· 2 sources
Intel expects the mid-October explosion at its Fab 28 plant near Kiryat Gat, Israel, to cost about $600 million in lost revenue across the fourth quarter of 2026 and the first quarter of 2027, and to reduce shipments of 10nm-class server processors for months, the company said during an earnings call.
InfoQ's AI, machine learning and data engineering team has published its 2026 trends report, naming AI agents the year's dominant theme and charting a shift from large language models to small language models. The report calls 2026 the year of inference, tracks the rise of physical AI and notes growing attention to AI evaluations. It was compiled by InfoQ editors with guest Chip Huyen.
· 2 sources
Waymo has announced that its next robotaxi will be the Toyota bZ4X, an electric SUV that will have autonomous driving sensors and computers installed during manufacturing at Toyota’s Takaoka plant in Japan. The assembly-line build marks a shift from retrofitting finished vehicles, with a Tokyo service planned for 2027 and the vehicles also intended for UK operations.
· 2 sources
Epoch AI reported autonomous Firefox exploits, while Mistral released model weights with claims about coding and cyberdefense. Anthropic described its approach to detecting misuse, and accounts of a DeepMind essay focused on coordination between AI agents as an economic constraint.
A critical vulnerability in PHP, the programming language that underpins more than 70% of the world's websites, has triggered a global security response, with multiple European governments and the Port of Rotterdam taking websites offline and cyber agencies in Australia, the US, the UK, Europe and Japan urging developers to apply urgent patches.
Intel CFO David Zinsner said during the company's latest earnings call that its budget-focused Wildcat Lake laptop chips are sold out, with demand having 'seen significant growth.' CEO Lip-Bu Tan said the chips' demand 'is outstripping supply,' adding that the industry is navigating one of the most significant supply shortages in history, driven by demand for artificial intelligence. Zinsner also warned that the memory shortage is unlikely to ease before 2028, telling investors, 'Make no mistake, we are not optimistic about next year in terms of memory.'
More than half of Victorian lawyers reported using artificial intelligence at work, but only 26% said it had reduced client fees, according to a new survey that also found lawyers were spending time dealing with clients’ inaccurate or misleading information and correcting AI-generated documents.
· 2 sources
Researchers at security firm Forever Security have discovered vulnerabilities in five popular AI developer tools that could let attackers execute code on host machines, steal files, or spoof website addresses. The flaws, which affect Cursor, GitHub Copilot, Anthropic's Claude Desktop, Microsoft's VS Code and OpenAI's Codex, stem from a common class of weakness the company calls 'Embrace', over-empowered embedded browsers. While Cursor and GitHub Copilot have been patched, flaws in VS Code and Codex remain unpatched, according to the researchers.
Singapore police say at least two cases involving tampered Ledger hardware wallets have been reported since September 10, with combined losses of about 3.5 million Singapore dollars ($2.7 million), placing the first local report almost a month before the wider incident became public.
Canada is taking an equity stake of up to $1.1 billion in a Toronto-based AI startup, part of a broader push by Washington's allies to reduce their technological reliance on the United States.
Microsoft has begun rolling out a preview update for Windows 11 that allows users to customise the right-click context menu, addressing a persistent complaint from power users about familiar command locations being hidden behind icons or an additional click. The update arrives alongside the company's quarterly financial report, which showed a continued decline in the business of selling Windows licences for new PCs.
Intel CEO Lip-Bu Tan confirmed that the next-generation Nova Lake desktop processors will be the first client product to use the company's enhanced 18A-P manufacturing node, with further details to be shared at CES in January. The announcement came during Intel's Q3 2026 earnings call, where executives also said the company intends to take Panther Lake capacity offline to produce more Granite Rapids data center chips and warned of a significant contraction in the PC market.
Japan Airlines has disclosed that a data breach at Amadeus's Passenger Service System exposed the personal information of about 92,000 customers, with the unauthorised access spanning more than three years.
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. The company said it had fixed the issue and referred the breach to law enforcement, promising to make affected users whole.
· 5 sources
A source familiar with the matter said Binance is working with the FBI to recover assets stolen in the record $6.3 billion hack. The exchange said on Friday it had reserved more than $6.34 billion of its own funds to cover losses, while blockchain intelligence firms linked the theft to North Korea’s TraderTraitor hacking unit.
· 68 sources
Google's OAuth platform has introduced support for Demonstrating Proof-of-Possession (DPoP), a cryptographic mechanism designed to mitigate the replay of stolen tokens by attackers, though the protection currently applies only to refresh tokens, not access tokens or web session cookies.
Reddit shares dropped more than 15% Thursday after the company reported third-quarter earnings that beat expectations but issued a weaker-than-expected fourth-quarter revenue forecast and announced plans to require all users to create accounts to access the platform, a major change for the site long known as 'the front page of the internet.'
· 5 sources
Amazon Web Services principal engineer Carl Lerche demonstrated Topcoat, a Rust framework for building web applications using server-side rendering, at ScyllaDB's P99 virtual conference last week. The framework compiles Rust code into JavaScript and runs most of its logic on the server, unlike most present-day JavaScript frameworks.
Serval, an AI workflow automation startup challenging ServiceNow, has raised $150 million at a $3 billion valuation in a Series C round led by Sequoia, bringing its total funding to $277 million.
Google has launched the ability to generate, preview, and edit a range of file formats, including PDFs, Google Docs, Sheets, and slide decks, directly within Gemini chats, removing the need to switch apps for modifications. The feature is available today for all Gemini users.
Personal information, including Social Security numbers, of up to 4.9 million individuals was vulnerable during a data breach at the Florida Department of Education’s financial aid website, the agency announced Thursday.
A hacking group was observed exploiting a patched Cisco vulnerability to deploy a custom malware framework called KeyDrift in attacks on space and satellite services, defense and aerospace technology, and policy research organizations, Cisco Talos researchers reported. The group, tracked as UAT-11473, appears to overlap with the Chinese state-sponsored Volt Typhoon's 'Silent Train' covert access network, though Talos made no definitive links.
Meta has quietly launched an AI fashion app called Style Sketch that helps users digitise their wardrobes and generate outfit ideas using their existing clothes, with virtual try-on features matched to their body shape and skin tone.
· 2 sources
Granola, the AI meeting-notetaking startup valued at $1.5 billion, has launched a dictation feature on Mac that lets users type by voice in any application, the company announced on Thursday. The feature will roll out to iOS and Windows soon.
· 2 sources
Stanley Druckenmiller, the billionaire hedge fund manager, posted his first message on X to announce he is investing in TradeXYZ, the developer behind Hyperliquid's perpetual futures market, as the platform partners with Intercontinental Exchange (ICE) to seek regulatory approval to bring the products onshore to the United States.
· 2 sourcesMore than 300 Chrome extensions with a combined 13.4 million installations have been caught hijacking users' searches, redirecting them through tracking servers to generate advertising revenue from Bing and Yahoo, according to a report from Socket.
AI stocks tumbled after Alphabet's earnings disappointed investors, but the day also brought antitrust scrutiny of Nvidia's acquisition plans, new developer tools from Google, and signs of growing AI power demand from Caterpillar.
· 8 sources
Kevin Bates, the creator of the Arduboy handheld gaming device, has introduced a digital candle that uses a custom AI model to simulate the appearance of a flickering flame. Priced at $149, the device is available now with a black or white circuit board.
AI computing demand is eating into production capacity for PC, smart-device and gadget makers, with PCB shortages and price rises expected in coming months, according to a Nikkei Asia report.
Dream, a startup founded by former Palantir executives Andy Elder and Arjun Mathur, emerged from stealth Wednesday with $17 million in seed funding led by Andreessen Horowitz to build AI world models that automate building design and engineering. The company aims to overhaul the architecture, engineering and construction (AEC) industry, where professionals still manually draw designs on legacy software.
· 3 sources
Moldovan President Maia Sandu has called a meeting of the country's National Security Council after a large-scale cyberattack on government information systems resulted in the extraction of personal data belonging to roughly 750,000 Moldovans, in an attack most likely carried out with the help of artificial intelligence.
Hyperliquid’s HYPE token surged about 13% on Thursday to roughly $91 after Intercontinental Exchange (ICE), the owner of the New York Stock Exchange, signed a definitive agreement to bring Hyperliquid-based perpetual futures to the United States through Trade[XYZ], a company that runs markets for real-world assets on Hyperliquid. The deal still requires regulatory approvals and has no launch date.
· 2 sourcesThe French Senate has adopted a bill authorising the automatic exchange of crypto-asset tax information between international tax authorities, sending it to the National Assembly for further legislative consideration.
Britain’s signals intelligence agency GCHQ still cannot tell the Investigatory Powers Commissioner’s Office (IPCO) where thousands of its storage devices are, years after the problem was first raised, according to a watchdog report published this week. The devices, which include USB sticks, hard drives and memory cards, may contain data covered by the Investigatory Powers Act, meaning they could hold intercepted communications or other highly sensitive material.
· 3 sourcesCanton Strategic Holdings, a Nasdaq-listed company formerly known as Tharimmune, has announced plans to tokenize its common shares on the Canton Network, with trading expected to begin as soon as Nov. 2, following a partnership with trading venue TSV LLC and SEC-registered transfer agent Fairmint.
Belgium's finance and tax agency (FOD Financiën) has confirmed a cyberattack after which it took several digital services offline, including the main online tax portal MyMinfin, and said the deadline for certain tax filings will be extended to November 16.
The world’s largest 100% battery-electric ferry, China Zorrilla, has entered commercial service, crossing the River Plate between Buenos Aires and Colonia del Sacramento. The 426-foot catamaran, built by Australian shipyard Incat Tasmania for South American operator Buquebus, can carry up to 2,100 passengers and 225 vehicles on the 34-mile route.
Systemd, the Unix init system, will support the Rust programming language for new modules, developer Christian Brauner announced. Brauner said the feature had been merged as version 263 was under construction, allowing Rust code for new leaf components but not porting existing C code or writing Rust for components that other components depend on.
A Reddit user says files on their Synology DS918+ NAS were encrypted in a ransomware attack; analysis of logs and operating system files suggested the attack likely involved CVE-2024-10441, a remote code execution vulnerability revealed 18 months ago. The device had its web interface exposed to the internet and was roughly a year and a half out of date with security patches, according to a detailed write-up by user NakamuraHwang.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug, tracked as CVE-2026-46300 and named Fragnesia. In a Monday report, Dream Security analysts said the vulnerabilities were used to breach more than two dozen servers, including three belonging to a U.S. government-affiliated organization.
· 2 sources